[nodejs] bcryptjs vs bcrypt

[Carlos Carcamo]

Hello there, hope you're well.

I have a little question about of this modules, which one would you recommend to use in a project?

1. bcryptjs: https://github.com/dcodeIO/bcrypt.js

Or
2. bcrypt: https://github.com/ncb000gt/node.bcrypt.js

the first one says "While bcrypt.js is compatible to the C++ bcrypt binding, it is written in pure JavaScript and thus slower (about 2.7 times), effectively reducing the number of iterations that can be processed in an equal time span"

Which one do you prefer and why?

Thanks for your answers

--

"El desarrollo no es material es un estado de conciencia mental"

[Tim Kuijsten]

Recently did a roundup [1] and chose bcrypt [2], one of the reasons was
that it's not entirely clear if the JS versions are vulnerable to timing
attacks.

[1] https://www.npmjs.com/package/bcrypt-speed
[2] https://www.npmjs.com/package/mongo-bcrypt-user

-Tim

Carlos Carcamo schreef op 09-01-15 om 17:07:

> Hello there, hope you're well.
>
> I have a little question about of this modules, which one would you
> recommend to use in a project?
>
> 1. bcryptjs: https://github.com/dcodeIO/bcrypt.js
> Or
> 2. bcrypt: https://github.com/ncb000gt/node.bcrypt.js
>
> the first one says "While bcrypt.js is compatible to the C++ bcrypt
> binding, it is written in pure JavaScript and thus slower (about 2.7

> times <https://github.com/dcodeIO/bcrypt.js/wiki/Benchmark>),

> effectively reducing the number of iterations that can be processed in
> an equal time span"
>
> Which one do you prefer and why?
>
> Thanks for your answers
> --
> "El desarrollo no es material es un estado de conciencia mental"
>

> --
> Job board: http://jobs.nodejs.org/
> New group rules:
> https://gist.github.com/othiym23/9886289#file-moderation-policy-md
> Old group rules:
> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
> ---
> You received this message because you are subscribed to the Google
> Groups "nodejs" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to nodejs+un...@googlegroups.com
> <mailto:nodejs+un...@googlegroups.com>.
> To post to this group, send email to nod...@googlegroups.com
> <mailto:nod...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/nodejs/CADpTsTbnO49sviid8yFnBFcgkBG7FjyEEfQoh81yd0Z4Haedhg%40mail.gmail.com
> <https://groups.google.com/d/msgid/nodejs/CADpTsTbnO49sviid8yFnBFcgkBG7FjyEEfQoh81yd0Z4Haedhg%40mail.gmail.com?utm_medium=email&utm_source=footer>.
> For more options, visit https://groups.google.com/d/optout.

[Adrian Lynch]

I asked a similar question of twin-bcrypt. Have a read of this:

https://github.com/fpirsch/twin-bcrypt/issues/1

Which will lead you to this:

https://www.npmjs.com/package/bcrypt-speed

Let us know what you decide on and why.

Adrian

--

Job board: http://jobs.nodejs.org/
New group rules: https://gist.github.com/othiym23/9886289#file-moderation-policy-md
Old group rules: https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
---
You received this message because you are subscribed to the Google Groups "nodejs" group.

To unsubscribe from this group and stop receiving emails from it, send an email to nodejs+un...@googlegroups.com.
To post to this group, send email to nod...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/nodejs/CADpTsTbnO49sviid8yFnBFcgkBG7FjyEEfQoh81yd0Z4Haedhg%40mail.gmail.com.